Facilio · OAuth Scopes

Facilio OAuth Scopes

OAuth 2.0 searched

Facilio publishes 7 OAuth 2.0 scopes via the authorizationCode and password flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Facilio API on a user’s behalf.

Tokens are issued from https://us.facilioapis.com/identity/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyAiFacility ManagementCMMSProperty OperationsMaintenanceAsset ManagementReal EstateIoTBuildings

Scopes: 7 Flows: authorizationCode, password Method: searched

OAuth endpoints

Authorization URL
https://us.facilioapis.com/identity/oauth2/authorize https://mcp.facilio.com/authorize

Token URL
https://us.facilioapis.com/identity/oauth2/token https://mcp.facilio.com/token

Flows
authorizationCodepassword

Scopes (7)

Scope	Description	Flows
openid	OpenID Connect authentication	authorizationCode
email	Access the authenticated user's email	authorizationCode
profile	Access the authenticated user's basic profile	authorizationCode
connections:actions.execute.read	Execute read-only actions/queries through Facilio connections	authorizationCode
connections:actions.execute.write	Execute write actions (create/update) through Facilio connections	authorizationCode
connections:actions.execute.destructive	Execute destructive actions (delete); the MCP server requires explicit user confirmation before performing these	authorizationCode
api	Coarse-grained API access scope advertised by the MCP server card	authorizationCode

📄 Provider scope reference: https://mcp.facilio.com/.well-known/oauth-authorization-server

Source

OAuth Scopes

generated: '2026-07-19'
method: searched
source: openapi/facilio-openapi-original.yaml
docs: https://mcp.facilio.com/.well-known/oauth-authorization-server
notes: >-
  The Facilio REST API OpenAPI declares an oauth2 scheme with empty scope maps
  (coarse-grained bearer access). The granular published scope surface lives on
  Facilio's hosted MCP OAuth 2.0 Authorization Server (https://mcp.facilio.com),
  captured verbatim below from its RFC 8414 authorization-server metadata
  (well-known/facilio-mcp-oauth-authorization-server.json).
schemes:
- name: oauth2
  source: openapi/facilio-openapi-original.yaml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://us.facilioapis.com/identity/oauth2/authorize
    tokenUrl: https://us.facilioapis.com/identity/oauth2/token
  - flow: password
    tokenUrl: https://us.facilioapis.com/identity/oauth2/token
- name: mcp-oauth2
  source: https://mcp.facilio.com/.well-known/oauth-authorization-server
  flows:
  - flow: authorizationCode
    authorizationUrl: https://mcp.facilio.com/authorize
    tokenUrl: https://mcp.facilio.com/token
scopes:
- scope: openid
  description: OpenID Connect authentication
  flows: [authorizationCode]
  sources: [https://mcp.facilio.com/.well-known/oauth-authorization-server]
- scope: email
  description: Access the authenticated user's email
  flows: [authorizationCode]
  sources: [https://mcp.facilio.com/.well-known/oauth-authorization-server]
- scope: profile
  description: Access the authenticated user's basic profile
  flows: [authorizationCode]
  sources: [https://mcp.facilio.com/.well-known/oauth-authorization-server]
- scope: connections:actions.execute.read
  description: Execute read-only actions/queries through Facilio connections
  flows: [authorizationCode]
  sources: [https://mcp.facilio.com/.well-known/oauth-authorization-server]
- scope: connections:actions.execute.write
  description: Execute write actions (create/update) through Facilio connections
  flows: [authorizationCode]
  sources: [https://mcp.facilio.com/.well-known/oauth-authorization-server]
- scope: connections:actions.execute.destructive
  description: >-
    Execute destructive actions (delete); the MCP server requires explicit user
    confirmation before performing these
  flows: [authorizationCode]
  sources: [https://mcp.facilio.com/.well-known/oauth-authorization-server]
- scope: api
  description: Coarse-grained API access scope advertised by the MCP server card
  flows: [authorizationCode]
  sources: [https://facilio.com/.well-known/mcp/server-card.json]